A Carleton University student is charged with breaking into the school’s computer network and exposing the personal information of 32 students, according to a report in the Ottawa Sun.

Mansour Moufid is charged with mischief to data and unauthorized use of a computer. The penalties for the charges range from fines to jail time. Moufid has been released and is under police orders not to use a computer.

Moufid is accused of accessing personal data in students’ campus cards, which are used as identification, for purchases, and even to access residence floors, from a campus computer lab. He then compiled the information in a 16-page report and sent it to the university administration under a false name. The campus issues a magnetic stripe ID card.

Police say that Moufid just wanted to let the university know about the security flaws.